CVE-2019-0612
MEDIUMMicrosoft Edge - Security Feature Bypass via Click2Play Flash Handling
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-0612. PoCs published by Google Security Research.
AI-analyzed exploit summary This exploit bypasses Flash click2play in Microsoft Edge by manipulating the CObjectElement::FinalCreateObject logic to load a Flash object without user interaction. It leverages a race condition and document state manipulation to bypass security checks.
Description
A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerability does not allow arbitrary code execution, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
Exploits (1)
This exploit bypasses Flash click2play in Microsoft Edge by manipulating the CObjectElement::FinalCreateObject logic to load a Flash object without user interaction. It leverages a race condition and document state manipulation to bypass security checks.
References (1)
Scores
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N